You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
5 years ago | |
|---|---|---|
| .. | ||
| README.txt | 5 years ago | |
| auto | 5 years ago | |
| pump.prism | 5 years ago | |
| pump.props | 5 years ago | |
README.txt
This case study concerns the NRL (Naval Research Laboratory) pump,
which is designed to provide reliable and secure communication over networks of
nodes with 'high' and 'low' security levels, preventing the channel leaking
information through the timing of messages and acknowledgements.
It is modelled as a partially observable probabilistic timed automaton (POPTA),
as described in [NPZ17]. This extends the PTA model of [LMS+14].
The design of the NRL pump itself is presented in [KMM98].
=====================================================================================
PARAMETERS:
h0: delay added when high sends a 0
h1: delay added when high sends a 1
N: number of messages low can send before guessing
=====================================================================================
[KMM98]
M. Kang, A. Moore and I. Moskowitz
Design and assurance strategy for the NRL pump
Computer 31(4), 56–64,1998
[LMS+14]
R. Lanotte, A. Maggiolo-Schettini, S. Tini, A. Troina and E. Tronci
Automatic analysis of